]> git.ipfire.org Git - thirdparty/gnutls.git/log
thirdparty/gnutls.git
15 years agoAvoid hard-coded /usr/bin/perl (trick taken from Gnulib.)
Ludovic Courtès [Sun, 27 Feb 2011 16:59:39 +0000 (17:59 +0100)] 
Avoid hard-coded /usr/bin/perl (trick taken from Gnulib.)

15 years agoFix LZO-enabled builds.
Ludovic Courtès [Sun, 27 Feb 2011 16:45:55 +0000 (17:45 +0100)] 
Fix LZO-enabled builds.

15 years agoDetect fork() in the random number generator and reseed.
Nikos Mavrogiannopoulos [Thu, 24 Feb 2011 16:19:29 +0000 (17:19 +0100)] 
Detect fork() in the random number generator and reseed.

15 years agouse timeouts closer to DTLS RFC.
Nikos Mavrogiannopoulos [Wed, 23 Feb 2011 20:25:10 +0000 (21:25 +0100)] 
use timeouts closer to DTLS RFC.

15 years agoRenamed gnutls_transport_set_push_function2() to gnutls_transport_set_vec_push_functi...
Nikos Mavrogiannopoulos [Wed, 23 Feb 2011 17:51:48 +0000 (18:51 +0100)] 
Renamed gnutls_transport_set_push_function2() to gnutls_transport_set_vec_push_function().

15 years agoRemove gnutls_x509_crq_get_preferred_hash_algorithm.
Simon Josefsson [Sun, 20 Feb 2011 19:59:56 +0000 (20:59 +0100)] 
Remove gnutls_x509_crq_get_preferred_hash_algorithm.

15 years agoRemove dropped functions.
Simon Josefsson [Sun, 20 Feb 2011 19:43:05 +0000 (20:43 +0100)] 
Remove dropped functions.

15 years agoAdd deprecated docstring.
Simon Josefsson [Sun, 20 Feb 2011 19:44:52 +0000 (20:44 +0100)] 
Add deprecated docstring.

15 years agoFix deprecated docstring.
Simon Josefsson [Sun, 20 Feb 2011 19:45:48 +0000 (20:45 +0100)] 
Fix deprecated docstring.

15 years agoFix docstring.
Simon Josefsson [Sun, 20 Feb 2011 19:48:05 +0000 (20:48 +0100)] 
Fix docstring.

15 years agoFix docstring of new function.
Simon Josefsson [Sun, 20 Feb 2011 18:44:15 +0000 (19:44 +0100)] 
Fix docstring of new function.

15 years agoFix docstring for deprecated functions.
Simon Josefsson [Sun, 20 Feb 2011 18:55:53 +0000 (19:55 +0100)] 
Fix docstring for deprecated functions.

15 years agoMake it build.
Simon Josefsson [Sun, 20 Feb 2011 18:39:59 +0000 (19:39 +0100)] 
Make it build.

15 years agoFix docstring of deprecated function.
Simon Josefsson [Sun, 20 Feb 2011 18:40:30 +0000 (19:40 +0100)] 
Fix docstring of deprecated function.

15 years agoFix docstrinf of new function.
Simon Josefsson [Sun, 20 Feb 2011 18:42:14 +0000 (19:42 +0100)] 
Fix docstrinf of new function.

15 years agoFix typo.
Simon Josefsson [Sun, 20 Feb 2011 18:42:32 +0000 (19:42 +0100)] 
Fix typo.

15 years agoImprove text.
Simon Josefsson [Sun, 20 Feb 2011 18:42:58 +0000 (19:42 +0100)] 
Improve text.

15 years agoDoc fix of new function.
Simon Josefsson [Sun, 20 Feb 2011 18:37:49 +0000 (19:37 +0100)] 
Doc fix of new function.

15 years agoFix docstring of deprecated functions.
Simon Josefsson [Sun, 20 Feb 2011 18:07:51 +0000 (19:07 +0100)] 
Fix docstring of deprecated functions.

15 years agoRename gnutls_privkey_sign_data2 to gnutls_privkey_sign_data and gnutls_privkey_sign_...
Simon Josefsson [Sun, 20 Feb 2011 18:30:02 +0000 (19:30 +0100)] 
Rename gnutls_privkey_sign_data2 to gnutls_privkey_sign_data and gnutls_privkey_sign_hash2 to gnutls_privkey_sign_hash.

These were added during the 2.11 cycle where we don't promise ABI
compatibility.

15 years agoAdd doc/gnutls-crypto-layers.eps.
Simon Josefsson [Sun, 20 Feb 2011 16:34:52 +0000 (17:34 +0100)] 
Add doc/gnutls-crypto-layers.eps.

15 years agoDist gnutls-crypto-layers.*.
Simon Josefsson [Sun, 20 Feb 2011 16:34:15 +0000 (17:34 +0100)] 
Dist gnutls-crypto-layers.*.

15 years agoAdd abstract_int.h.
Simon Josefsson [Sun, 20 Feb 2011 16:29:35 +0000 (17:29 +0100)] 
Add abstract_int.h.

15 years agoIgnore more.
Simon Josefsson [Sun, 20 Feb 2011 15:42:31 +0000 (16:42 +0100)] 
Ignore more.

15 years agoLink with -lnettle too.
Simon Josefsson [Sun, 20 Feb 2011 15:48:10 +0000 (16:48 +0100)] 
Link with -lnettle too.

15 years agoFix syntax-check warnings.
Simon Josefsson [Sun, 20 Feb 2011 15:37:22 +0000 (16:37 +0100)] 
Fix syntax-check warnings.

15 years agoguile: Remove GNUTLS_A_INNER_APPLICATION_FAILURE and GNUTLS_A_INNER_APPLICATION_VERIF...
Ludovic Courtès [Tue, 22 Feb 2011 22:23:00 +0000 (23:23 +0100)] 
guile: Remove GNUTLS_A_INNER_APPLICATION_FAILURE and GNUTLS_A_INNER_APPLICATION_VERIFICATION.

15 years agostore entities as numbers to avoid issues in big-little endian machines.
Nikos Mavrogiannopoulos [Tue, 22 Feb 2011 20:55:58 +0000 (21:55 +0100)] 
store entities as numbers to avoid issues in big-little endian machines.

15 years agodocumented the DTLS sequence particularities.
Nikos Mavrogiannopoulos [Mon, 21 Feb 2011 23:07:15 +0000 (00:07 +0100)] 
documented the DTLS sequence particularities.

15 years agoAdded gnutls_record_recv_seq() that can return the sequence number
Nikos Mavrogiannopoulos [Mon, 21 Feb 2011 23:01:57 +0000 (00:01 +0100)] 
Added gnutls_record_recv_seq() that can return the sequence number
of the record packet, in addition to data.

15 years agoreorganized and simplified gnutls_recv_int(). It will discard invalid DTLS packets.
Nikos Mavrogiannopoulos [Mon, 21 Feb 2011 22:34:02 +0000 (23:34 +0100)] 
reorganized and simplified gnutls_recv_int(). It will discard invalid DTLS packets.

15 years agoDiscard messages that contain a different epoch than the current one.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 20:52:35 +0000 (21:52 +0100)] 
Discard messages that contain a different epoch than the current one.

15 years agorenamed internal function to reflect functionality.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 20:15:07 +0000 (21:15 +0100)] 
renamed internal function to reflect functionality.

15 years agoImplemented a sliding window-like thing to discard replayed packets.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 20:07:29 +0000 (21:07 +0100)] 
Implemented a sliding window-like thing to discard replayed packets.

15 years agognutls-cli shouldn't print errors on EAGAIN and INTERRUPTED.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 20:05:16 +0000 (21:05 +0100)] 
gnutls-cli shouldn't print errors on EAGAIN and INTERRUPTED.

15 years agocorrected uint48pp.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 19:45:32 +0000 (20:45 +0100)] 
corrected uint48pp.

15 years agoEpoch garbage collector is being run when handshake is being cleaned up.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 16:13:41 +0000 (17:13 +0100)] 
Epoch garbage collector is being run when handshake is being cleaned up.

15 years agoskip replays in handshake packets.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 16:01:43 +0000 (17:01 +0100)] 
skip replays in handshake packets.

15 years agoForbid SSL v.2 client hello in DTLS.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 13:22:30 +0000 (14:22 +0100)] 
Forbid SSL v.2 client hello in DTLS.

15 years agoremoved unneeded variables.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 13:12:07 +0000 (14:12 +0100)] 
removed unneeded variables.

15 years agoCleanups in combination of DTLS and TLS buffers.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 13:06:39 +0000 (14:06 +0100)] 
Cleanups in combination of DTLS and TLS buffers.

15 years agognutls_x509_log replaced with gnutls_audit_log.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 11:23:16 +0000 (12:23 +0100)] 
gnutls_x509_log replaced with gnutls_audit_log.

15 years agoReturn a more precise mtu unit to applications.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 11:11:54 +0000 (12:11 +0100)] 
Return a more precise mtu unit to applications.

15 years agorestart handshake on signals.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 11:11:52 +0000 (12:11 +0100)] 
restart handshake on signals.

15 years agoreference counting in epochs is being done using functions.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 10:10:14 +0000 (11:10 +0100)] 
reference counting in epochs is being done using functions.

15 years agoAdded gnutls_dtls_g/set_mtu() to allow setting and getting the DTLS mtu from application.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 09:55:29 +0000 (10:55 +0100)] 
Added gnutls_dtls_g/set_mtu() to allow setting and getting the DTLS mtu from application.

15 years agoCombined DTLS buffers and normal TLS buffers.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 09:38:33 +0000 (10:38 +0100)] 
Combined DTLS buffers and normal TLS buffers.

15 years agoChanges to allow DTLS server side to operate. Added a simple UDP server on gnutls...
Nikos Mavrogiannopoulos [Sat, 19 Feb 2011 15:57:44 +0000 (16:57 +0100)] 
Changes to allow DTLS server side to operate. Added a simple UDP server on gnutls-serv.
Server other cleanups.

15 years agoAllow setting the DTLS timeouts explicitly.
Nikos Mavrogiannopoulos [Sat, 19 Feb 2011 10:25:29 +0000 (11:25 +0100)] 
Allow setting the DTLS timeouts explicitly.

15 years agoupdated.
Nikos Mavrogiannopoulos [Sat, 19 Feb 2011 09:10:45 +0000 (10:10 +0100)] 
updated.

15 years agoSeveral updates for DTLS (client side only) to work.
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 22:59:36 +0000 (23:59 +0100)] 
Several updates for DTLS (client side only) to work.

15 years agoIncreased level of opencdk debug messages.
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 21:37:37 +0000 (22:37 +0100)] 
Increased level of opencdk debug messages.

15 years agoDSA keys in TLS 1.x, x<2 and SSL 3.0 use SHA-1 as hash. That is we reverted to previo...
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 10:58:34 +0000 (11:58 +0100)] 
DSA keys in TLS 1.x, x<2 and SSL 3.0 use SHA-1 as hash. That is we reverted to previous gnutls behavior. That violates DSS but all implementations handle it like that.

15 years agouse similar API when caching messages in DTLS or TLS.
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 10:41:11 +0000 (11:41 +0100)] 
use similar API when caching messages in DTLS or TLS.

15 years agocorrected is_version_supported().
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 10:01:58 +0000 (11:01 +0100)] 
corrected is_version_supported().

15 years agoSimplified _gnutls_recv_handshake().
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 09:41:20 +0000 (10:41 +0100)] 
Simplified _gnutls_recv_handshake().

15 years agociphersuites have a bit that indicates whether they are usable with DTLS or not.
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 09:06:26 +0000 (10:06 +0100)] 
ciphersuites have a bit that indicates whether they are usable with DTLS or not.

15 years agofix for dtls.
Nikos Mavrogiannopoulos [Thu, 17 Feb 2011 21:57:40 +0000 (22:57 +0100)] 
fix for dtls.

15 years agodtls: Add uint48 handling functions.
Jonathan Bastien-Filiatrault [Sat, 2 Oct 2010 21:13:51 +0000 (17:13 -0400)] 
dtls: Add uint48 handling functions.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Bring epoch choice on receive closer to the first usage.
Jonathan Bastien-Filiatrault [Sat, 2 Oct 2010 21:10:13 +0000 (17:10 -0400)] 
dtls: Bring epoch choice on receive closer to the first usage.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoAdd DTLS support to command-line client.
Jonathan Bastien-Filiatrault [Sat, 25 Sep 2010 01:53:26 +0000 (21:53 -0400)] 
Add DTLS support to command-line client.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Write epoch to sequence number.
Jonathan Bastien-Filiatrault [Fri, 17 Sep 2010 18:34:07 +0000 (14:34 -0400)] 
dtls: Write epoch to sequence number.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Send consistent a client_random.
Jonathan Bastien-Filiatrault [Mon, 6 Sep 2010 05:18:54 +0000 (01:18 -0400)] 
dtls: Send consistent a client_random.

This is necessary when challenged by HelloVerifiyRequest as we MUST
send the same client parameters.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Limit the number of HelloVerifyRequest round trips.
Jonathan Bastien-Filiatrault [Mon, 6 Sep 2010 02:52:03 +0000 (22:52 -0400)] 
dtls: Limit the number of HelloVerifyRequest round trips.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: TEMP: Sprinkle transmits.
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 17:02:51 +0000 (13:02 -0400)] 
dtls: TEMP: Sprinkle transmits.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Do HANDSHAKE_HELLO_VERIFY_REQUEST processing.
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 06:30:05 +0000 (02:30 -0400)] 
dtls: Do HANDSHAKE_HELLO_VERIFY_REQUEST processing.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Add _gnutls_recv_hello_verify_request.
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 06:27:25 +0000 (02:27 -0400)] 
dtls: Add _gnutls_recv_hello_verify_request.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoDecrypt using the proper sequence number.
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 05:33:01 +0000 (01:33 -0400)] 
Decrypt using the proper sequence number.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Use proper record sequence for DTLS decrypt.
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 05:29:57 +0000 (01:29 -0400)] 
dtls: Use proper record sequence for DTLS decrypt.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agocorrected extdatalen
Nikos Mavrogiannopoulos [Thu, 17 Feb 2011 21:47:46 +0000 (22:47 +0100)] 
corrected extdatalen

15 years agodtls: Read whole datagrams.
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 05:25:35 +0000 (01:25 -0400)] 
dtls: Read whole datagrams.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Queue outgoing handshake messages in the retransmission layer.
Jonathan Bastien-Filiatrault [Tue, 4 Aug 2009 01:44:51 +0000 (21:44 -0400)] 
dtls: Queue outgoing handshake messages in the retransmission layer.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoAdd outgoing flight buffer handling code.
Jonathan Bastien-Filiatrault [Tue, 4 Aug 2009 01:44:24 +0000 (21:44 -0400)] 
Add outgoing flight buffer handling code.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoDefine _gnutls_dtls_log for DTLS.
Jonathan Bastien-Filiatrault [Tue, 4 Aug 2009 01:43:17 +0000 (21:43 -0400)] 
Define _gnutls_dtls_log for DTLS.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoAdd structures for the buffered outgoing flight.
Jonathan Bastien-Filiatrault [Tue, 4 Aug 2009 01:42:21 +0000 (21:42 -0400)] 
Add structures for the buffered outgoing flight.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoAdd state for handshake mtu.
Jonathan Bastien-Filiatrault [Tue, 4 Aug 2009 01:38:51 +0000 (21:38 -0400)] 
Add state for handshake mtu.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Fixup outgoing ClientHello hashing.
Jonathan Bastien-Filiatrault [Mon, 3 Aug 2009 19:11:23 +0000 (15:11 -0400)] 
dtls: Fixup outgoing ClientHello hashing.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoAdd proper handshake outgoing sequence number.
Jonathan Bastien-Filiatrault [Mon, 3 Aug 2009 19:10:27 +0000 (15:10 -0400)] 
Add proper handshake outgoing sequence number.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoAdd gnutls_dtls.{c,h}.
Jonathan Bastien-Filiatrault [Mon, 3 Aug 2009 19:08:58 +0000 (15:08 -0400)] 
Add gnutls_dtls.{c,h}.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Remove unsuitable ciphers.
Jonathan Bastien-Filiatrault [Sun, 2 Aug 2009 23:00:08 +0000 (19:00 -0400)] 
dtls: Remove unsuitable ciphers.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Add hanshake fragment headers when sending handshake.
Jonathan Bastien-Filiatrault [Tue, 28 Jul 2009 16:03:17 +0000 (12:03 -0400)] 
dtls: Add hanshake fragment headers when sending handshake.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Add epoch and sequence number to DTLS packets.
Jonathan Bastien-Filiatrault [Tue, 28 Jul 2009 15:50:56 +0000 (11:50 -0400)] 
dtls: Add epoch and sequence number to DTLS packets.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoUse increment functions for sequence number.
Jonathan Bastien-Filiatrault [Tue, 28 Jul 2009 15:51:58 +0000 (11:51 -0400)] 
Use increment functions for sequence number.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Add types and operations required for the DTLS epoch and sequence.
Jonathan Bastien-Filiatrault [Tue, 28 Jul 2009 01:47:55 +0000 (21:47 -0400)] 
dtls: Add types and operations required for the DTLS epoch and sequence.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoMake version lookup transport dependent.
Jonathan Bastien-Filiatrault [Wed, 29 Jul 2009 23:26:21 +0000 (19:26 -0400)] 
Make version lookup transport dependent.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agodtls: Add _gnutls_is_dtls to check if a session uses DTLS.
Jonathan Bastien-Filiatrault [Mon, 3 Aug 2009 17:19:41 +0000 (13:19 -0400)] 
dtls: Add _gnutls_is_dtls to check if a session uses DTLS.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoAdd gnutls_init_dtls function.
Jonathan Bastien-Filiatrault [Sat, 25 Jul 2009 23:58:22 +0000 (19:58 -0400)] 
Add gnutls_init_dtls function.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoAdd DTLS state.
Jonathan Bastien-Filiatrault [Sat, 25 Jul 2009 23:54:27 +0000 (19:54 -0400)] 
Add DTLS state.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoAdd DTLS1.0 protocol entry.
Jonathan Bastien-Filiatrault [Wed, 15 Jul 2009 23:48:33 +0000 (19:48 -0400)] 
Add DTLS1.0 protocol entry.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoAllocate session buffers of size, depending on type of session.
Jonathan Bastien-Filiatrault [Sat, 18 Sep 2010 00:33:38 +0000 (20:33 -0400)] 
Allocate session buffers of size, depending on type of session.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoHarmonize "d" argument between constate.c and compress.c.
Jonathan Bastien-Filiatrault [Sat, 25 Sep 2010 16:43:03 +0000 (12:43 -0400)] 
Harmonize "d" argument between constate.c and compress.c.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoFix typo.
Jonathan Bastien-Filiatrault [Sat, 25 Sep 2010 01:59:05 +0000 (21:59 -0400)] 
Fix typo.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoParenthesize UINT64DATA again.
Jonathan Bastien-Filiatrault [Tue, 21 Sep 2010 20:14:55 +0000 (16:14 -0400)] 
Parenthesize UINT64DATA again.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
15 years agoreorganization of ciphersuite discussion.
Nikos Mavrogiannopoulos [Wed, 16 Feb 2011 19:54:36 +0000 (20:54 +0100)] 
reorganization of ciphersuite discussion.

15 years agoAllow using the minus "-" in the -ALL priority strings.
Nikos Mavrogiannopoulos [Tue, 15 Feb 2011 22:13:25 +0000 (23:13 +0100)] 
Allow using the minus "-" in the -ALL priority strings.

15 years agoAdded fixme note on TLS 1.2 PRF per ciphersuite.
Nikos Mavrogiannopoulos [Tue, 15 Feb 2011 21:29:16 +0000 (22:29 +0100)] 
Added fixme note on TLS 1.2 PRF per ciphersuite.

15 years agoThe safe renegotiation ciphersuite is not required to be registered.
Nikos Mavrogiannopoulos [Tue, 15 Feb 2011 21:21:40 +0000 (22:21 +0100)] 
The safe renegotiation ciphersuite is not required to be registered.

15 years agoCorrected bug in DHE-PSK in freeing username/key.
Nikos Mavrogiannopoulos [Tue, 15 Feb 2011 21:15:05 +0000 (22:15 +0100)] 
Corrected bug in DHE-PSK in freeing username/key.

15 years agoAdded ciphersuites (from RFC5487):
Nikos Mavrogiannopoulos [Tue, 15 Feb 2011 21:02:53 +0000 (22:02 +0100)] 
Added ciphersuites (from RFC5487):
TLS_PSK_WITH_AES_128_GCM_SHA256
TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
TLS_PSK_WITH_AES_128_CBC_SHA256
TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
TLS_PSK_WITH_NULL_SHA256
TLS_DHE_PSK_WITH_NULL_SHA256

15 years agoCorrected signature generation and verification
Nikos Mavrogiannopoulos [Fri, 11 Feb 2011 23:05:31 +0000 (00:05 +0100)] 
Corrected signature generation and verification
in the Certificate Verify message when in TLS 1.2. Reported
by Todd A. Ouska.